Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.mft
File: QwTYaLC50dQ2eOtGeufD-jv_4vg.mft (raw, json)
Hash identifier: knkdvqxlSueSo1v6KWfbcIsZLDVXquKf6t65PN79siY=
Subject key identifier: 7C:12:AD:19:3E:B1:57:30:D8:9D:39:82:23:38:91:F4:B1:FE:45:8E
Authority key identifier: 43:04:D8:68:B0:B9:D1:D4:36:78:EB:46:7A:E7:C3:FA:3B:FF:E2:F8
Certificate issuer: /CN=4304d868b0b9d1d43678eb467ae7c3fa3bffe2f8
Certificate serial: 0199FC8F1B4349317806C21D03DB70F74F8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwTYaLC50dQ2eOtGeufD-jv_4vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.mft
Manifest number: 0D8C
Signing time: Sun 19 Oct 2025 13:01:01 +0000
Manifest this update: Sun 19 Oct 2025 13:01:01 +0000
Manifest next update: Mon 20 Oct 2025 13:01:01 +0000
Files and hashes: 1: 0sfAJDOKEgD2Tzsu1RWmyLUySdU.roa (hash: VH3wSYokwNKbdRdlo/plfnhiJKHB8F9C3/JbEz05f7k=)
2: QwTYaLC50dQ2eOtGeufD-jv_4vg.crl (hash: /Ey1ASzh8cOT/UX96FVDI4htqBlZtXUdzmXCcAIgm3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwTYaLC50dQ2eOtGeufD-jv_4vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:1b:43:49:31:78:06:c2:1d:03:db:70:f7:4f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4304d868b0b9d1d43678eb467ae7c3fa3bffe2f8
Validity
Not Before: Oct 19 13:01:01 2025 GMT
Not After : Oct 20 13:01:01 2025 GMT
Subject: CN=7c12ad193eb15730d89d3982233891f4b1fe458e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:91:62:30:7b:a8:bc:57:5a:cd:65:75:3e:85:
5b:0d:a2:d4:9e:b8:ab:49:8f:95:90:4b:62:87:5e:
b7:ef:08:52:3f:40:cb:f1:c3:20:c2:a5:82:e9:e6:
b9:f6:29:f6:46:5e:d8:73:1b:f0:a3:64:52:be:c9:
86:93:21:0b:4b:d2:26:fa:02:08:f9:f5:fe:71:b7:
f9:2f:7f:69:9c:ac:b7:7d:df:ca:e5:23:d7:74:a9:
85:18:02:56:51:71:e4:f7:ae:59:4c:9b:0e:e2:92:
40:63:61:da:7a:fe:fc:71:ca:28:6b:4d:e5:cd:b6:
09:a5:3d:f2:c4:9c:4b:18:66:ce:49:f5:24:e4:ee:
03:8d:d6:16:5b:a7:7e:5b:7f:fd:5c:07:9c:1f:63:
25:0f:12:04:66:e3:05:ab:37:a3:2f:a6:71:44:11:
d3:05:84:ac:af:7a:d4:53:02:82:6d:30:3d:07:0b:
f6:19:5d:6b:b7:b5:94:c7:5b:30:ec:17:66:60:88:
35:ac:f5:12:1b:30:16:a2:24:2b:8d:0e:f6:5c:b8:
c2:eb:d6:9f:bd:58:d5:ce:2a:c8:9a:d6:eb:9a:91:
5c:55:4e:a3:e2:b1:99:7e:7b:db:a9:28:f4:60:08:
9a:9b:1b:ff:0f:fd:d0:20:ae:46:71:46:bc:2d:38:
82:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:12:AD:19:3E:B1:57:30:D8:9D:39:82:23:38:91:F4:B1:FE:45:8E
X509v3 Authority Key Identifier:
keyid:43:04:D8:68:B0:B9:D1:D4:36:78:EB:46:7A:E7:C3:FA:3B:FF:E2:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwTYaLC50dQ2eOtGeufD-jv_4vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:4e:74:54:68:e2:d9:ba:9b:4f:3a:c3:d4:b1:75:48:79:18:
9f:1e:df:01:2f:59:4e:aa:52:d4:59:cd:f3:40:c2:b7:23:b1:
8b:ed:d9:1d:19:58:a2:db:a2:82:d0:68:ce:1f:68:e9:56:a8:
7b:1b:da:ab:ec:12:27:b9:b4:fd:ca:07:7d:5c:07:3c:82:5b:
b9:74:83:03:18:86:d5:0a:9b:21:9c:57:a9:0e:9b:b0:42:46:
ea:59:36:32:9e:01:3a:ef:2a:15:03:b5:0d:1b:36:b3:f8:a5:
08:1c:6b:e5:e9:9a:c4:eb:10:42:31:9e:2c:9a:9b:ed:7e:6f:
9e:cf:09:17:bc:c7:80:4f:20:36:43:23:f2:b1:f0:a7:f8:3d:
b0:8e:57:66:89:e0:ce:db:5f:26:75:5a:ff:5d:07:21:36:f0:
bd:b2:3c:40:c1:6c:6d:a3:f9:e4:24:d4:b9:14:9a:2d:15:b5:
81:ab:52:2d:7d:ee:4e:1a:f3:fe:0b:bb:86:b4:26:b0:ca:62:
1e:d5:fa:64:4d:05:1f:58:eb:31:ed:c6:99:2c:c2:c3:e8:1d:
18:81:ca:80:2f:72:4a:03:48:0f:8d:15:31:05:eb:d0:44:53:
40:80:15:1c:7c:fa:1d:d0:7b:a2:96:8e:b2:bc:92:13:69:41:
62:29:e1:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:30 2025 by rpki-client